$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145535.roa File: AS145535.roa (raw, json) Hash identifier: oc4ZCrq/B9Hchp9s+1c+bFuW6gRUCuxPI3bxuJu/+90= Subject key identifier: F6:FA:E5:A6:81:CE:6F:12:8C:1F:9D:9B:1C:A7:BF:04:BE:7C:0A:C3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34049326F17C2B21CA04F1C81E437CA036AC3145 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145535.roa Signing time: Wed 04 Mar 2026 06:29:46 +0000 ROA not before: Wed 04 Mar 2026 06:24:46 +0000 ROA not after: Wed 03 Mar 2027 06:29:46 +0000 asID: 145535 IP address blocks: 240a:ab45::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:04:93:26:f1:7c:2b:21:ca:04:f1:c8:1e:43:7c:a0:36:ac:31:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:46 2026 GMT Not After : Mar 3 06:29:46 2027 GMT Subject: CN=F6FAE5A681CE6F128C1F9D9B1CA7BF04BE7C0AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:f4:1d:dd:a4:61:bb:96:02:fa:19:2e:f3: d4:a0:e4:67:a9:ca:74:2c:73:aa:62:14:d2:0d:f0: 72:a2:d9:5d:d8:d4:c8:b6:a5:e0:b3:97:17:48:4d: e4:35:d5:b3:26:27:86:6f:99:a3:94:ff:a1:aa:f7: e9:9f:c9:33:de:05:ad:90:94:82:ae:cd:13:40:fc: 62:b3:d8:64:ce:c2:e0:e8:eb:6d:4c:01:29:21:5f: 7a:57:1a:7b:c7:28:a8:ed:ab:06:fe:96:68:1d:50: 98:f8:41:5c:28:cf:69:4e:0a:ad:3c:5b:c4:13:96: f9:c6:78:f7:44:98:70:ee:61:d2:fc:8c:0c:f3:e1: 5c:91:8b:59:f3:7e:5f:df:3b:0c:77:74:ca:5f:7c: f4:e8:c0:e8:df:89:fc:88:cf:72:22:6c:20:d0:84: 4a:78:67:49:87:91:43:40:4a:87:52:1f:15:ff:a4: 4b:b5:c9:30:38:f7:dc:c0:27:16:19:ec:85:dd:84: ae:bb:2d:2a:63:72:23:90:b9:25:03:83:7e:08:5e: 6d:9c:6b:3c:e3:95:05:46:19:e8:ee:c5:5a:b0:a9: be:01:34:a1:d0:70:ec:95:af:b5:d3:6f:17:48:49: 7b:e6:7c:d5:4c:67:6d:68:1d:69:33:6f:f3:ba:fa: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FA:E5:A6:81:CE:6F:12:8C:1F:9D:9B:1C:A7:BF:04:BE:7C:0A:C3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab45::/32 Signature Algorithm: sha256WithRSAEncryption 0a:6c:3e:27:3f:7a:10:7d:05:47:0b:42:ea:d5:3a:2f:41:2c: 02:71:9b:3f:98:2d:e9:0c:f6:7d:8d:27:a9:95:e4:3c:9d:8d: ff:d1:16:76:60:51:7e:12:e0:12:40:24:72:b4:61:6c:42:f9: 64:d9:d4:ce:b3:ee:8b:df:f0:f9:bb:2f:4b:5a:63:f5:45:82: 56:f2:5f:a6:5d:bc:06:3d:7c:95:78:c2:fc:21:38:a2:52:f0: 05:b2:1a:34:57:ec:40:7d:0f:c0:5d:8b:66:d6:48:90:5b:d9: 6e:df:2e:59:e7:71:98:69:12:60:df:fe:1c:af:eb:b8:01:a3: 58:9d:6e:a9:97:a6:36:58:66:90:0d:1a:5d:88:95:90:21:1c: 9b:5e:b8:2f:6d:d5:d9:15:92:80:03:8c:17:10:0c:f7:47:cf: 71:19:f2:6f:a7:b6:ba:e8:5b:16:eb:76:fc:9b:b8:02:9b:f7: d4:13:c0:6e:6b:6c:68:f7:70:49:36:78:f1:0c:c0:b0:ba:0e: a1:8c:50:a3:77:84:a3:2e:b0:fc:cf:1a:89:61:66:f9:36:3d: 37:ac:8b:75:9f:2c:01:24:cd:c8:7f:d0:05:58:5f:f4:87:cf: 38:5f:14:1c:38:45:40:3d:1b:2d:ae:eb:a7:8e:a4:85:77:34: 87:21:54:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNASTJvF8KyHKBPHIHkN8oDasMUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0NloX DTI3MDMwMzA2Mjk0NlowMzExMC8GA1UEAxMoRjZGQUU1QTY4MUNFNkYxMjhDMUY5 RDlCMUNBN0JGMDRCRTdDMEFDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8I9B3dpGG7lgL6GS7z1KDkZ6nKdCxzqmIU0g3wcqLZXdjUyLal4LOXF0hN 5DXVsyYnhm+Zo5T/oar36Z/JM94FrZCUgq7NE0D8YrPYZM7C4OjrbUwBKSFfelca e8coqO2rBv6WaB1QmPhBXCjPaU4KrTxbxBOW+cZ490SYcO5h0vyMDPPhXJGLWfN+ X987DHd0yl989OjA6N+J/IjPciJsINCESnhnSYeRQ0BKh1IfFf+kS7XJMDj33MAn Fhnshd2ErrstKmNyI5C5JQODfghebZxrPOOVBUYZ6O7FWrCpvgE0odBw7JWvtdNv F0hJe+Z81UxnbWgdaTNv87r60r8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT2+uWm gc5vEowfnZscp78EvnwKwzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q0UwDQYJKoZIhvcNAQELBQADggEBAApsPic/ehB9BUcLQurVOi9BLAJxmz+YLekM 9n2NJ6mV5Dydjf/RFnZgUX4S4BJAJHK0YWxC+WTZ1M6z7ovf8Pm7L0taY/VFglby X6ZdvAY9fJV4wvwhOKJS8AWyGjRX7EB9D8Bdi2bWSJBb2W7fLlnncZhpEmDf/hyv 67gBo1idbqmXpjZYZpANGl2IlZAhHJteuC9t1dkVkoADjBcQDPdHz3EZ8m+ntrro WxbrdvybuAKb99QTwG5rbGj3cEk2ePEMwLC6DqGMUKN3hKMusPzPGolhZvk2PTes i3WfLAEkzch/0AVYX/SHzzhfFBw4RUA9Gy2u66eOpIV3NIchVII= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client